Phase B-next access gate
Owners portal access now requires enterprise sign-in.
The owners workspace now exchanges a real Keycloak session before setting its scoped cookie. The requested perimeter must match the claims granted by the enterprise realm.
Default scope: urban-collection / france / capital-assets / paris-rive-gauche
Enterprise sign-in
owner_admin
Authenticate with Keycloak, then enter only when the role and asset scope are both granted by the identity token.
Enterprise sign-in
owner_finance
Authenticate with Keycloak, then enter only when the role and asset scope are both granted by the identity token.
Enterprise sign-in
owner_operations
Authenticate with Keycloak, then enter only when the role and asset scope are both granted by the identity token.
Dev Bypass
⚡ Login as owner_admin